Universal Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates.
Which two OAuth flows should be considered to meet the requirement? (Choose two.)

• A.Refresh Token flow
• B.Web Server flow
• C.JWT Bearer Token flow
• D.SAML Bearer Assertion flow

Comment: *

Name: *

Email: *

Verification: *

The security team at Universal Containers (UC) hasidentified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so.
For all other users of Salesforce, users should be allowed to use AD Credentials orSalesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?

• A.Use SAML Federated Authentication and block access to reports when accessed through a Standard Assurance session.
• B.Use SAML federated Authentication with a Login Flow to dynamically add or remove a Permission Set that grants the Export Reports Permission.
• C.Use SAML federated Authentication, treat SAML Sessions as High Assurance, and raise the session level required for exporting reports.
• D.Use SAML Federated Authentication and Custom SAML JIT Provisioning to dynamically and or remove a permission set that grants the Export Reports Permission.

Comment: *

Name: *

Email: *

Verification: *

In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

• A.Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
• B.Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
• C.Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.
• D.Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow the employees to post ideas from the Employee portal. When clicking some links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with relevant pages.
What scope should be requested when using the OAuth token to meet this requirement?

• A.full
• B.api
• C.web
• D.Visualforce

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses Salesforce for Sales Opportunity Management. Okta was recently brought in to Just-in-Time (JIT) provision and authenticate NTO users to applications. Salesforce users also use Okta to authorize a Forecasting web application to access Salesforce records on their behalf.
Which two roles are being performed by Salesforce?
Choose 2 answers

• A.SAML Identity Provider
• B.SAML Service Provider
• C.OAuth Client
• D.OAuth Resource Server

Comment: *

Name: *

Email: *

Verification: *